Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: o3g7cBh+FhDc28FCNc1pOvXLGk7vQR1XRESfZthdfaU=
Subject key identifier: DC:3A:F0:E0:C9:83:5F:09:D9:58:50:21:74:44:1F:A8:0F:E7:A5:E5
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 01A134108C07092CAB3DCC0D0A722AE53E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 121A
Signing time: Tue 13 Oct 2026 07:01:01 +0000
Manifest this update: Tue 13 Oct 2026 07:01:01 +0000
Manifest next update: Wed 14 Oct 2026 07:01:01 +0000
Files and hashes: 1: JONbkjOcThPFPe34Q68G6YG7CEA.roa (hash: PZVk2tUkIHhzZkYLKlXFtV0597wIzDAE7k654RC/+A4=)
2: X6SzNQXiBFFDJhBNdvMhCBPHFfQ.roa (hash: fQujnsKiKmQAa2eiIQn71F8Xhr3SmxLUUr/Q/pLfIgU=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: Y5SJ1CBhBiGbALDmzC9WCw+2/8mCV8Dx5TBzur/WmcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:10:8c:07:09:2c:ab:3d:cc:0d:0a:72:2a:e5:3e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Oct 13 07:01:01 2026 GMT
Not After : Oct 14 07:01:01 2026 GMT
Subject: CN=dc3af0e0c9835f09d958502174441fa80fe7a5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6c:9f:82:f4:32:4d:d4:50:ef:21:8e:ff:7b:
d2:34:09:c1:9a:c6:07:37:c4:06:8d:d1:d5:15:22:
c4:24:28:e8:51:a9:da:48:8b:b9:01:69:b5:94:f7:
53:32:ff:64:df:6f:79:72:d9:5e:e8:7f:69:6c:cc:
07:67:02:30:d2:b3:c8:da:b6:a7:64:fc:f8:7e:d5:
62:ff:35:37:74:2e:3b:68:fd:69:bb:39:a9:39:13:
c1:6f:03:5e:5e:24:00:21:1f:a0:43:4e:99:d3:cf:
a0:58:b1:f1:6f:71:9b:a3:7a:7a:c9:b1:b3:88:c1:
70:75:32:83:ee:54:52:55:1b:71:6c:cc:10:f9:39:
b2:6d:bf:b4:19:9b:09:72:cc:81:55:c4:aa:7e:a4:
d2:0f:42:18:ff:92:57:60:2b:8c:95:5e:f0:5d:14:
4e:24:d0:a6:8c:2d:8e:d5:0d:de:48:bc:74:c1:de:
b8:21:d4:dc:62:ea:e8:a4:77:52:79:09:19:67:0e:
2a:5b:ba:49:f4:fb:ca:b8:ea:58:de:8e:69:96:bc:
07:6a:12:4a:5e:b3:b2:dc:5d:58:d5:ea:ce:a2:d1:
4a:80:d9:86:03:ae:f2:af:c8:67:c3:de:f3:86:41:
f6:fa:83:98:8e:6d:96:43:42:5a:81:f4:e7:2d:65:
8a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3A:F0:E0:C9:83:5F:09:D9:58:50:21:74:44:1F:A8:0F:E7:A5:E5
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:66:63:1e:c2:d5:9e:f3:cf:d7:cd:27:80:24:ae:9f:cc:ed:
c0:39:8c:0e:5a:fd:25:16:ad:3c:63:cf:e4:65:41:d7:13:23:
3e:30:6a:eb:21:54:00:2a:42:34:2f:4d:1b:68:a4:b3:24:94:
d4:58:9a:db:22:6a:03:1f:be:8f:64:3c:90:7f:20:82:2e:86:
85:22:af:bb:0f:f6:7e:2e:9c:6e:03:1a:db:06:16:da:77:4b:
ec:6c:e6:79:28:94:6a:5e:64:5a:f8:e6:b3:2a:ea:b9:b6:9d:
41:73:8b:52:d9:43:1c:8a:dd:0c:ba:f0:bc:85:5d:ac:f8:ed:
b2:52:1d:09:16:f7:54:92:37:d9:c2:bc:7f:b8:a9:34:bd:ce:
0c:36:e7:4d:d1:ea:07:2b:1d:6a:a8:4e:e1:4d:99:6a:f4:5a:
a7:d1:81:c2:37:f7:0f:e3:06:9a:ca:67:44:8f:9d:8b:26:65:
e2:92:f6:fc:41:32:bd:fd:e3:83:61:40:75:94:01:9a:3c:53:
78:09:18:67:be:bd:5a:31:c5:24:37:e2:03:a3:8f:97:ad:b5:
10:25:8a:0f:0b:a3:95:eb:5b:76:e5:2b:c8:ad:f1:69:96:85:
3f:a4:94:63:d3:51:0d:46:bf:a5:8a:fc:b0:50:f6:da:a4:2a:
48:5d:2a:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE0EIwHCSyrPcwNCnIq5T4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDM4ZWFjZjRkMDY0ZTg3YTc2YmI0NjJkM2I0YjJjYzM4
NThhNGMwHhcNMjYxMDEzMDcwMTAxWhcNMjYxMDE0MDcwMTAxWjAzMTEwLwYDVQQD
EyhkYzNhZjBlMGM5ODM1ZjA5ZDk1ODUwMjE3NDQ0MWZhODBmZTdhNWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWyfgvQyTdRQ7yGO/3vSNAnBmsYH
N8QGjdHVFSLEJCjoUanaSIu5AWm1lPdTMv9k3295ctle6H9pbMwHZwIw0rPI2ran
ZPz4ftVi/zU3dC47aP1puzmpORPBbwNeXiQAIR+gQ06Z08+gWLHxb3Gbo3p6ybGz
iMFwdTKD7lRSVRtxbMwQ+Tmybb+0GZsJcsyBVcSqfqTSD0IY/5JXYCuMlV7wXRRO
JNCmjC2O1Q3eSLx0wd64IdTcYuropHdSeQkZZw4qW7pJ9PvKuOpY3o5plrwHahJK
XrOy3F1Y1erOotFKgNmGA67yr8hnw97zhkH2+oOYjm2WQ0JagfTnLWWK8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNw68ODJg18J2VhQIXREH6gP56XlMB8GA1UdIwQY
MBaAFKhDjqz00GToena7Ri07SyzDhYpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEt
MWMyODAwODMxYzY0LzEvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEtMWMyODAwODMxYzY0
LzEvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWZjHsLV
nvPP180ngCSun8ztwDmMDlr9JRatPGPP5GVB1xMjPjBq6yFUACpCNC9NG2iksySU
1Fia2yJqAx++j2Q8kH8ggi6GhSKvuw/2fi6cbgMa2wYW2ndL7GzmeSiUal5kWvjm
syrqubadQXOLUtlDHIrdDLrwvIVdrPjtslIdCRb3VJI32cK8f7ipNL3ODDbnTdHq
BysdaqhO4U2ZavRap9GBwjf3D+MGmspnRI+diyZl4pL2/EEyvf3jg2FAdZQBmjxT
eAkYZ769WjHFJDfiA6OPl621ECWKDwujletbduUryK3xaZaFP6SUY9NRDUa/pYr8
sFD22qQqSF0qyA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 14:16:41 2026 by rpki-client